Hi Everyone, I need help with inter-vlan routing

I have this current physical setup:

1x RB3011 UiAS-RM Router
1x Cisco SG200-50P Switch (Core Switch)
2x Cisco SG200-50 Switch

The switches were layer 2 and the necessary port trunks have been configured.
Switch 1 (Core):
Port 48 = Router
Port 49 = Switch 2
Port 50 = Switch 3

Problem:
How can I allow all Vlans to access "Vlan100 IT"? This Vlan100 IT is where our biometrics, file server, printer, etc. were connected and I need either every vlans or even just vlan 101, 102, 103, 104, 105, 110 can access to it.

There is an error in your configuration, you have created a VLAN interface on top of a slave interface, you can read more about this case here:
https://wiki.mikrotik.com/wiki/Manual:L ... _interface

If this is all of your configuration, then with this configuration interVLAN routing is allowed between all VLANs.
If you are not able to access other VLANs, then you have probably set up a Firewall (maybe on a different device).

1. Post the entire config. (with the software version). Don't leave out what you think is irrelevant.
2. Don't use ports directly once they are in a bridge e.g. "/interface vlan add interface=eth5-LAN name="Vlan100 IT" vlan-id=100" should use LAN-Bridge not eth5-LAN.
3. I don't see what the point of LAN-Bridge is in the first place.
4. Say what you have tried to determine that things aren't working. e.g. have you tried pinging anything, both from the router itself and from various devices

That's what I knew as well, I thought I did the right thing however; I cannot make an inter-vlan access when trying on any computers from different vlans.

All vlans were connected and do actually have an internet access. I'm not quite sure if I should need to config anything within the bridge such as bridge vlan, bridge vlan filtering etc. as the switches I am using were layer 2 cisco smart switches.

But when I try to ping the following gateway addresses of each vlans from a client PC, it's not reachable:
10.7.10.1 (10.7.10.0/24)
10.7.20.1 (10.7.20.0/24)
10.7.21.1 (10.7.21.0/24)
10.7.22.1 (10.7.22.0/24)
10.7.4.1 (10.7.4.0/24)
10.7.5.1 (10.7.5.0/24)
10.7.6.1 (10.7.6.0/24)
10.7.7.1 (10.7.7.0/24)
10.7.8.1 (10.7.8.0/24)
10.7.9.1 (10.7.9.0/24)



I'm quite new to mikrotik. Below were the vlan configurations of my cisco switches:
Switch 1 (Core Switch)
Interface Settings:



Vlan Membership Settings:



Switch 2
Interface Settings:



Vlan Membership Settings:



Switch 3
Interface Settings:



Vlan Membership Settings:

I see, thank you everyone. Will try it again

I have changed the vlan interface which is on slave interface

here's the complete config:

I can see the following:


while


So any new connection towards the subnet of cannot be established as fits into and the subnets of all the other VLANs fit into .

Supposing that the purpose of that last filter rule above was to separate other VLANs from each other, you need to put an exception rule just before it in order to permit access to from all other vlans:


The firewall rules are quite messy in general, as there is no "drop the rest" rule in the end of filter chains and , and the default policy in RouterOS is always .

Hi, still my vlans can't communicate with each other.

Vlans were now under the bridge interface instead of the slave interface

I disabled these rules already as it has been added by my colleague from our HQ: LAN IP: 10.7.0.1/16 still can't ping the vlan's ip addresses